40
Information Security Education Journal Volume 2 Number 1 June 2015
Figure 5. Survey results from one pre-survey &post-survey
Figure 6. Survey Result from one post-survey question
question
see the effectiveness of the tool based on the answers from each student. A comparison of the results between the pre-survey and
post-survey should indicate the level of knowledge acquired after using those hands-on labs. These labs or scenarios building
around the three different areas of insider threats attempts to build in the student an awareness and understanding of Information
Assurance (I.A) concepts and the application of these concepts to real world insider threat cases. The pre-survey and post-
survey also gave an indication of the usefulness of CyberCIEGE as a training tool for the purposes of this paper. The post-survey
is used as a measurement medium to detect how students’ knowledge of IA concepts and its real world applications improved
after using the module or otherwise.
Since two hands-on labs are first-time to be given one security class for 29 students. A simple pre-survey and post –survey were
set for students to answer. Our surveys are included two parts: pre-survey was done before students took any modules and
post-surveys were conducted after students completed two hands-on labs. All students are CIS majors.
Figure 5 shows the results when students are asked to rate your awareness with insider threat. Previous before completing the
hands-on labs more than seventy percent of students were not familiar insider threat. Post survey results shows that after
completing the module students felt more acquainted with insider threat. Figure 6 shows the results when students are asked
was the lab helpful in your understanding the concept of insider threat. It was important for hands-on labs to offer a simple
approach to convey the importance of insider threat. We knew students wouldn’t have a lot of time for a broad topic. The design
of those hands-on labs focused on straightforward experience to learn the concepts, so the learning curve was smooth.
The majority of CIS students are taught basic security concepts with no or little regard to insider threat issues. Building secure
systems requires incorporating concepts of insider threat into security fundamentals. Government and businesses are increasing
efforts in this area and so should colleges and universities. The overall evaluation of hands-on labs was positive. A higher
percentage of students considered the modules very helpful or somewhat helpful on a topic that they were not familiar with. In
addition, the students indicated that the modules helped them understand what and how to handle insider threat issues.
